Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848adf8588029e0185d07c5f6044eb/0/37342e3132302e3132302e302f32342d3234203d3e2038383838.roa
File:                     37342e3132302e3132302e302f32342d3234203d3e2038383838.roa (raw, json)
Hash identifier:          vTjzYGOhP+DUmFGK+M43CQ7gwCda9tUKK6RWxL5uafw=
Subject key identifier:   1B:3B:46:F6:54:2C:57:AC:10:16:DB:E9:B6:C2:AE:CC:E2:0D:C2:00
Certificate issuer:       /CN=9995ba05e90aa3951d9ab39d9355b6b683e32e6a19adf153f2
Certificate serial:       62F37E4EC19BE57CA3F18AF08CCEB27F472554F8
Authority key identifier: 35:14:EE:D0:EE:5C:55:34:23:A2:5F:1D:7D:56:FC:26:13:11:A1:EB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/907e0105-3516-47a0-a9c2-5f0b77661cb1/9995ba05e90aa3951d9ab39d9355b6b683e32e6a19adf153f2.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8588029e0185d07c5f6044eb/0/37342e3132302e3132302e302f32342d3234203d3e2038383838.roa
Signing time:             Fri 25 Sep 2026 21:36:20 +0000
ROA not before:           Fri 25 Sep 2026 21:31:20 +0000
ROA not after:            Fri 24 Sep 2027 21:36:20 +0000
asID:                     8888
IP address blocks:        74.120.120.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8588029e0185d07c5f6044eb/0/3514EED0EE5C553423A25F1D7D56FC261311A1EB.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8588029e0185d07c5f6044eb/0/3514EED0EE5C553423A25F1D7D56FC261311A1EB.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/907e0105-3516-47a0-a9c2-5f0b77661cb1/9995ba05e90aa3951d9ab39d9355b6b683e32e6a19adf153f2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/907e0105-3516-47a0-a9c2-5f0b77661cb1/907e0105-3516-47a0-a9c2-5f0b77661cb1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/907e0105-3516-47a0-a9c2-5f0b77661cb1/907e0105-3516-47a0-a9c2-5f0b77661cb1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/907e0105-3516-47a0-a9c2-5f0b77661cb1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 22 Oct 2026 04:53:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:f3:7e:4e:c1:9b:e5:7c:a3:f1:8a:f0:8c:ce:b2:7f:47:25:54:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9995ba05e90aa3951d9ab39d9355b6b683e32e6a19adf153f2
        Validity
            Not Before: Sep 25 21:31:20 2026 GMT
            Not After : Sep 24 21:36:20 2027 GMT
        Subject: CN=1B3B46F6542C57AC1016DBE9B6C2AECCE20DC200
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:6c:b8:ab:16:58:75:78:72:46:fd:33:62:3c:
                    78:c8:b9:aa:62:a1:91:a6:1f:75:3a:9d:e6:4f:81:
                    2b:7c:38:4b:60:ca:b0:f9:58:43:3d:e0:8e:d6:69:
                    a9:04:36:43:0b:da:5b:b2:97:9a:5a:ed:9d:9e:b8:
                    7c:2d:01:bf:7a:f6:89:7c:c4:a9:71:2f:dd:c3:24:
                    43:57:1c:dc:e8:72:5d:b2:42:28:4a:12:bd:a8:32:
                    97:d1:aa:51:b3:d5:e5:15:b9:0b:67:e3:a8:9d:ea:
                    d2:06:d1:7c:e4:bb:1f:00:6f:d8:8a:55:26:d3:f8:
                    91:04:f7:9a:2b:51:e5:b3:ae:fd:0f:62:1c:d3:e5:
                    4f:2b:b3:69:2c:e2:ee:9c:67:6f:74:70:17:4c:dd:
                    00:b5:5e:44:9a:60:d7:ca:ba:a0:54:e1:3c:b3:f2:
                    19:27:dc:47:b1:64:5c:e2:e0:8a:1f:b2:c6:34:a8:
                    3c:b6:55:41:2c:9c:77:c1:bb:9a:5c:46:24:b6:11:
                    fe:40:9b:94:ce:b3:6c:db:63:e2:1e:db:a8:97:83:
                    13:76:08:8e:bc:9f:18:59:1b:7c:cd:d5:44:cb:94:
                    ed:70:2f:f0:85:d7:4b:e1:c0:86:41:dc:92:28:55:
                    81:a6:3f:5e:4d:f4:f8:a4:95:c8:58:09:05:0c:b8:
                    df:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:3B:46:F6:54:2C:57:AC:10:16:DB:E9:B6:C2:AE:CC:E2:0D:C2:00
            X509v3 Authority Key Identifier:
                keyid:35:14:EE:D0:EE:5C:55:34:23:A2:5F:1D:7D:56:FC:26:13:11:A1:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8588029e0185d07c5f6044eb/0/3514EED0EE5C553423A25F1D7D56FC261311A1EB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/907e0105-3516-47a0-a9c2-5f0b77661cb1/9995ba05e90aa3951d9ab39d9355b6b683e32e6a19adf153f2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8588029e0185d07c5f6044eb/0/37342e3132302e3132302e302f32342d3234203d3e2038383838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.120.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         e1:85:84:cc:0a:d6:ee:e9:f8:04:c2:ac:d4:ee:89:94:45:ed:
         87:af:0c:5c:7b:75:7a:90:a2:35:89:24:61:74:16:61:b7:62:
         24:03:82:35:a1:d0:bd:b6:a2:3b:fc:85:2d:23:7b:e8:ae:6d:
         5b:0c:27:a8:4e:7d:49:94:f1:b4:75:95:1d:58:4c:eb:8d:4d:
         77:e2:b3:04:ee:4d:74:88:89:68:19:35:b5:8c:d2:0a:40:87:
         a3:98:a9:46:93:b8:64:0b:51:dd:05:1c:df:f3:ab:a4:20:e5:
         8e:7a:af:fb:c0:f8:1b:e5:2f:8d:90:03:3c:9f:51:8f:cd:d0:
         1a:b8:6e:86:af:e1:5b:bc:2c:73:46:3e:c6:47:76:80:f3:b4:
         d6:ea:8d:ab:66:ce:1b:93:a5:84:7d:5f:be:86:a7:6b:e2:99:
         d4:eb:57:5e:b7:2c:2f:16:e5:eb:65:4c:a8:a8:bf:fe:7f:a2:
         5d:e7:2d:1e:82:78:c5:b9:36:cb:d4:1e:03:99:88:32:1c:8d:
         9d:c2:e5:93:9a:01:74:5e:8a:e4:93:43:5b:d0:ba:09:5f:23:
         c3:f5:53:7e:4e:a0:a1:cc:eb:82:8d:6b:04:d0:79:eb:52:ce:
         8f:4f:63:0b:a4:72:ec:4b:de:9d:cd:aa:21:4c:ee:de:d7:66:
         51:6c:31:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 22:49:49 2026 by rpki-client